Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
File:                     3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft (raw, json)
Hash identifier:          ezB1AS+shoVmm8Y1nxa5prE7RiQIKZJh8xJLsMsi384=
Subject key identifier:   41:D2:64:20:0A:58:B1:19:20:CA:3B:1E:39:FC:CA:58:D8:06:11:BE
Authority key identifier: DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
Certificate issuer:       /CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Certificate serial:       01A0C47C73EAC186285B3AC0986737592866
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
Manifest number:          173A
Signing time:             Mon 21 Sep 2026 15:01:25 +0000
Manifest this update:     Mon 21 Sep 2026 15:01:25 +0000
Manifest next update:     Tue 22 Sep 2026 15:01:25 +0000
Files and hashes:         1: 204umdoIBOqtcTbJI3jfclBQCyw.roa (hash: IwWlQnWIC7tAHQ+uxk+vueYs6Cuvcq1jNuaEjgSin/4=)
                          2: 3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl (hash: 6io1P2Z+6EAP78t5DdX++f2KYIIDZgcRvhU5LIb1K2w=)
                          3: 8tyX_G1-_nW7kgFUYT9y4ShiVPc.roa (hash: L+fAM2wTev7jcaaHyppAq65XRuAVybyECH1GJHGUgB8=)
                          4: Y09xLkmt7VHTVYtC64eFlrK6j58.roa (hash: iA768afUcGVOaqrvOSx3MnWnS2M+3J4maoqeEMVN/wE=)
                          5: p0VUng2o1_gaZHh--wu0wK0iIL4.roa (hash: oO1bw6THJUf9h7ZSPQOfZA0dBR3CVemJCl3j27Vlz30=)
                          6: v0q74nFVUklRHXEbX3DfFnuxDhk.roa (hash: G3/kUDIGfBOfo10jBZiH7VnHCFywynXkvKClxNGu0gY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:7c:73:ea:c1:86:28:5b:3a:c0:98:67:37:59:28:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
        Validity
            Not Before: Sep 21 15:01:25 2026 GMT
            Not After : Sep 22 15:01:25 2026 GMT
        Subject: CN=41d264200a58b11920ca3b1e39fcca58d80611be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:54:69:32:77:5a:46:a5:d5:fc:46:e4:c6:b2:
                    56:38:db:b9:88:72:6f:a5:c1:ec:36:e3:93:12:e5:
                    5b:e7:fd:36:9b:a0:e4:9b:1b:1a:2e:ca:48:bb:f6:
                    7c:76:bf:50:3c:a9:8e:dd:b2:f7:78:3e:8c:23:3c:
                    c0:eb:4b:1e:56:f5:91:40:88:e4:c2:d9:22:83:d1:
                    88:8e:04:ed:6c:b8:f1:ea:2e:0c:8f:c3:0b:ca:e1:
                    2f:e5:bb:42:c8:56:2b:79:8b:ce:ae:a3:1e:7a:80:
                    47:ec:94:3c:82:db:18:12:6c:40:12:35:2b:5b:bb:
                    bd:66:59:6c:14:55:3c:b6:13:31:f4:94:89:d6:11:
                    26:21:00:b1:c9:ac:b8:13:2e:2c:4d:e5:ad:e3:9f:
                    18:fa:91:24:44:f2:c8:1e:54:f9:cc:d6:f7:25:29:
                    83:35:3c:3f:94:ed:b2:59:e4:a5:e6:9f:8b:8b:12:
                    53:84:ce:91:80:2e:a6:7a:49:9b:ad:e0:d7:6e:aa:
                    30:dd:7b:81:a1:01:ce:af:2c:70:2e:05:2b:89:a3:
                    ec:72:18:cf:fd:48:1a:14:47:f6:05:60:d6:29:06:
                    2f:5c:c7:65:35:cb:a1:bd:1d:18:ec:a5:a9:e2:0b:
                    0c:a3:d4:5b:60:6a:64:28:b0:99:85:79:f5:69:d0:
                    c7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D2:64:20:0A:58:B1:19:20:CA:3B:1E:39:FC:CA:58:D8:06:11:BE
            X509v3 Authority Key Identifier:
                keyid:DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:60:0b:26:f3:0d:ed:82:7f:5f:40:bd:ed:48:2d:1b:30:00:
         3c:87:dc:ad:a0:07:b7:4f:3d:75:ad:fc:92:54:d6:74:02:2f:
         f3:73:0c:92:e1:05:6e:c0:d7:81:d4:4a:40:d9:02:48:8b:b8:
         e8:9e:2f:6c:e4:67:80:be:0d:1d:15:fb:31:c6:1b:d5:7a:55:
         71:af:d3:ed:2a:fa:68:8f:29:84:c3:0b:3a:79:fb:10:56:85:
         72:9d:93:51:cb:33:21:e0:56:99:84:8e:a5:31:a1:4d:2d:6f:
         ad:c7:11:ec:4d:91:18:31:55:d2:5e:5f:6d:bd:7d:20:5c:7d:
         ef:91:9d:12:e3:b2:89:ab:3e:84:2e:6b:09:53:a6:a3:05:44:
         4b:4f:30:d9:ac:f9:5c:62:9e:28:2b:45:79:6a:e3:27:51:f8:
         20:57:9d:fa:8a:e5:5d:05:dd:42:8b:42:75:c6:08:45:8d:b8:
         e7:39:ce:40:5b:2a:c5:32:c1:2d:9c:32:90:c1:0b:9e:e8:3c:
         34:19:f1:90:ec:86:9c:69:58:83:01:ba:92:4e:80:a0:8e:49:
         72:8b:40:5e:76:df:57:11:85:e7:06:05:63:be:d9:a2:13:c6:
         94:85:fb:dd:81:f9:7b:5c:24:41:e2:0a:88:0a:b8:68:d7:7e:
         e5:b0:a6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:47:43 2026 by rpki-client